基于区块链的物联网安全轻量级认证方案  

Lightweight authentication scheme for IoT security based on blockchain

作　　者：邝应攀 钟节辉 柳晓龙 KUANG Ying-pan;ZHONG Jie-hui;LIU Xiao-long(College of Computer and Information Science,Fujian Agriculture and Forestry University,Fuzhou 350002,China;College of Mechanical and Electrical Engineering,Fujian Agriculture and Forestry University,Fuzhou 350002,China)

机构地区：[1]福建农林大学计算机与信息学院,福建福州350002 [2]福建农林大学机电工程学院,福建福州350002

出　　处：《计算机工程与设计》2024年第11期3225-3232,共8页Computer Engineering and Design

基　　金：福建省自然科学基金面上基金项目(2021J01123);福建省社会科学基金项目(FJ2021BF048);福建农林大学科技创新专项基金项目(KFb22091XA)。

摘　　要：针对现有物联网系统存在的安全和隐私问题,提出一种基于区块链的物联网安全轻量级认证方案。利用区块链的去中心化和不可篡改特性,同时结合高效的椭圆曲线加密算法,实现对设备和服务器身份信息的安全存储。设计轻量级的认证方案以满足物联网设备资源受限的要求。安全性分析和实验评估结果表明,该方案具有去中心化、抗单点故障、抗重放攻击、具备完美前向保密能力和会话密钥安全等安全特性,相较于现有的物联网认证方案,其具有计算响应时间更短,通信成本更低等优点。To address the existing security and privacy issues in internet of things(IoT)systems,a lightweight blockchain-based authentication scheme for IoT was proposed.The decentralization and tamper-proof characteristics of the blockchain were leve-raged,along with the efficiency of the elliptic curve cryptography(ECC),to securely store the identity information of devices and servers.A lightweight encryption algorithm was designed to accommodate the resource constraints of IoT devices.The security analysis and experimental evaluation results demonstrate that this scheme possesses security features such as decentralization,resistance to single-point failures and replay attacks,and perfect forward secrecy and session key security.Compared with exis-ting IoT authentication schemes,this scheme has shorter computation response times and lower communication costs.

关 键 词：物联网 区块链 椭圆曲线加密 轻量级认证 去中心化 相互认证 智能合约 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]